Executive Director, Information Security & GRC

Foundant Technologies; Canada; On-site; CAD 150,000 - 210,000; Full time

Job summary

Foundant Technologies seeks an experienced security and risk leader to guide information security and GRC across five product lines and global regions. You will shape the strategic roadmap, align teams, and communicate with clients and regulators to foster a security-first culture.

In this remote-first role, you will partner with Product and Engineering, manage third-party risk, oversee audits (SOC 2, ISO 27001), and present metrics to the Board.

Qualifications

• 8+ years of progressive leadership experience in information security and/or governance, risk, and compliance (GRC).
• Experience building or maturing a security and compliance program for a multi-product SaaS company.
• Experience navigating international regulatory and compliance frameworks (e.g., GDPR, UK GDPR, Australian Privacy Act, SOC 2, ISO 27001).
• Experience leading security incident response programs, including serving as a public-facing or client-facing spokesperson during incidents.
• Experience managing and developing senior technical and compliance leaders.
• CISSP, CISM, or CRISC preferred, but not required.
• No specific degree requirement - equivalent professional experience is accepted.
• Must be legally eligible to work in the United States.

Responsibilities

• Own and drive the maturity of Foundant's information security and GRC program end to end - setting the strategic roadmap that protects client trust across five products and all regions.
• Lead and develop the Head of Technical Security and Head of GRC, aligning teams around a shared security vision.
• Serve as Foundant's executive voice during security incidents, communicating with clients, leadership, and regulators.
• Build and mature the GRC program - policies, risk registers, control frameworks, and audits (SOC 2, ISO 27001).
• Ensure compliance across US, Canadian, European, UK, and Australian regulatory requirements.
• Partner with Product and Engineering to embed security by design into five product lines.
• Develop and present security and compliance metrics to executive leadership and the Board.
• Own third-party and vendor risk management across the extended ecosystem.

Skills

Information security leadership

GRC program leadership

Security incident response leadership

Regulatory compliance experience

Executive communication

Cross-functional leadership

Education

No degree required

Job description

Foundant Technologies seeks an experienced security and risk leader to guide information security and GRC across five product lines and global regions. You will shape the strategic roadmap, align teams, and communicate with clients and regulators to foster a security-first culture.

In this remote-first role, you will partner with Product and Engineering, manage third-party risk, oversee audits (SOC 2, ISO 27001), and present metrics to the Board.